vivek@kali:~/blog$ grep -r "threat-intel" ./posts/

#Incident Response

Security research, ethical hacking tutorials, cybercrime case studies, and threat intelligence from the field.

PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical Unauthenticated PHP RCE — Deep Technical Analysis, Burp Suite Detection & Blue Team Hunting Guide for Sentinel and Defender CVE-2026-5242
Featured · 16 min read
PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical Unauthenticated PHP RCE — Deep Technical Analysis, Burp Suite Detection & Blue Team Hunting Guide for Sentinel and Defender
PHP2Shell is the name for two critical, unauthenticated remote code execution flaws in PHP core (CVE-2026-109618 and CVE-2026-109619, CVSS 9.2) that affect roughly 70% of the internet. Details…
Oct 22, 2026 Cyber Awareness
Blue Team Burp Suite CVE-2026-109618 CVE-2026-109619
Read Full Post →
🔐
CVE-2025-5156
Red Team
HiveNightmare 2025: Why CVE-2021-36934 Still Powers Active Ransomware Campaigns — Complete Red & Blue Team Analysis
CVE-2021-36934 (HiveNightmare) continues powering Hunters International ransomware campaigns in 2025. Full exploitation chain, MITRE mapping, 4 validated Microsoft…
Jul 16, 2025 15 min
Blue Team Credential Dumping CVE-2021-36934